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AMENDMENTS TO THE CLAIMS 

Please add or amend the claims to read as follows, and cancel without prejudice or 
disclaimer to resubmission in a divisional or continuation application claims indicated as 
cancelled: 

1. (Currently Amended) A method perfomied by a server processor comprising: 
responding , bv the server processor, to a contact point created by a party committing 

fraud, the response including a set of details, the set of details including a set of 
false personal information. 

2. (Currently Amended) The method of claim 1, comprising responding to a contact 
point a plurality of times, each response including a different set of details. 

3. (Original) The method of claim 1, wherein the contact point is an Internet address 
referring to a web site. 

4. (Original) The method of claim 1, wherein the contact point is an e-mail address. 

5. (Original) The method of claim 1, wherein responding comprises transmitting 
information at a speed designed to mimic a human enLering data. 

6. (Original) The method of claim 1, comprising setting the timing of the responses to 
resemble that of a set of users responding to a Flushing attack. 

7. (Original) The method of claim 1, wherein each response includes a set of details that 
are internally consistent. 

8. (Currently Amended) The method of claim 1, comprising creating a database 
including a set of false identities, each false identity including a set of data which is consistent 
within the set of data . 
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9. (Original) The method of claim 1, wherein each response includes a set of details 
consistent with an Internet service provider used to respond. 

10. (Original) The method of claim 1, wherein the responding is in response to a Phishing 
attack. 

1 1 . (Original) The method of claim 1 , wherein the responding is conducted using a 
plurality of Internet access points. 

12. (Original) The method of claim 1, wherein the responding is conducted using a 
plurality of intermediate networks. 

13. (Original) The method of claim 1, wherein the responding is conducted using a 
plurality of intermediate Internet service providers. 

14. (Original) The method of claim 1, wherein the data in a response is marked, the 
method comprising monitoring an institution for the use of marked data in an attempted 
transaction. 

15. (Currently Amended) The method of claim 1, wherein the number of responses sent 
by the server processor is in proportion to a size of an attack in response to which the 
responses are sent. 

16. (Original) The method of claim 1, wherein responding comprises entering data into a 
web-form. 

17. (Original) The method of claim 1, comprising marking a response using a 
cryptographic algorithm, such that the marking is detectable only with a suitable 
cryptographic key. 
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18. (Original) The method of claim 1, wherein the details and the timing of the sending of 
the data mimic the behavior of automated client software. 

19. (Original) A method comprising: 

contacting a plurality of times a website and, with each contact, filling in a web-form 
with a set data, each set of data including a set of details, the set of details 
including a set of false personal information. 

20. (Original) The method of claim 19, wherein filling in the web-form comprises 
transmitting information at a speed designed to mimic a human entering data. 

21. (Original) The method of claim 19, comprising setting the timing of the contacting to 
resemble that of a set of unrelated users. 

22. (Original) The method of claim 19, wherein each contact includes a set of details that 
are internally consistent. 

23. (Currently Amended) The method of claim 19, comprising creating a database 
including a set of false identities, each false identity including a set of data which is consistent 
within the set of data . 

24. (Currently Amended) a system comprising: 
a server processor controller to: 

respond to a contact point created by a party committing fraud, the response 
including a set of details, the set of details including a set of false personal 
information. 

25. (Original) The system of claim 24, wherein the contact point is an Internet address 
referring to a web site. 



26. 



(Original) The system of claim 24, wherein the contact point is an e-mail address. 
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27. (Original) The system of claim 24, wherein responding comprises transmitting 
information at a speed designed to mimic a human entering data. 

28. (Original) The system of claim 24, wherein the timing of the responses is to resemble 
that of a set of users responding to a Flushing attack. 

29. (Original) The system of claim 24, wherein each response includes a set of details that 
are internally consistent. 

30. (Currently Amended) The system of claim 24, comprising a database including a set 
of false identities, each false identity including a set of data which is consistent within the set 
of data . 

31. (Original) The system of claim 24, wherein the responding is conducted using a 
plurality of intermediate networks. 

32. (Currently Amended) A system comprising: 

a server processor controller to contact a plurality of times a website and, with each 
contact, enter a set of data, each set of data including a set of details, the set of 
details including a set of false personal information. 

33. (Original) The system of claim 32, comprising a database including a set of false 
identities. 

34. (Original) The system of claim 32, wherein entering the data comprises transmitting 
information at a speed designed to mimic a human entering data. 



